A vulnerability marked as critical has been reported in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection.
This vulnerability is identified as CVE-2026-2117. The attack can be initiated remotely. Additionally, an exploit exists.
